$ rpki-client -vvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: APm3JBgbOsIoc2uSHm95DIPOgmptezfy23pKrkEEmgs= Subject key identifier: 81:4B:13:31:8F:A2:24:AF:B4:2D:ED:E2:7E:97:FA:1B:4E:60:46:40 Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 634C78C6B2E501AF47F75CBD1AECADD035638361 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:22:27 +0000 Manifest this update: Thu 23 Jul 2026 18:17:27 +0000 Manifest next update: Fri 24 Jul 2026 18:29:27 +0000 Files and hashes: 1: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: MvoAIgThCFY9PLcdbOkZwJljwlFUQCSeZ3lQLEWGfaY=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:78:c6:b2:e5:01:af:47:f7:5c:bd:1a:ec:ad:d0:35:63:83:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Jul 23 18:17:27 2026 GMT Not After : Jul 24 18:29:27 2026 GMT Subject: CN=814B13318FA224AFB42DEDE27E97FA1B4E604640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:b8:7d:cf:2a:57:89:43:1d:4f:3a:11:ed: 30:37:06:7a:bc:5f:da:1b:ee:08:9a:39:b4:c3:c4: 21:67:c3:04:f7:58:a6:74:e5:a7:c9:5b:23:6b:35: c3:48:91:45:15:ff:16:83:b6:6c:91:1d:3b:c3:af: 7a:fd:05:d0:f4:4c:0e:48:f0:1f:57:bd:12:59:e3: b8:c6:4b:ac:e4:b2:a9:1f:80:4e:7a:73:67:95:5f: 46:53:be:98:3f:6c:4d:da:d1:00:e3:9c:55:5d:5b: 11:23:93:d2:20:20:4b:92:3a:cd:23:38:96:4b:32: 08:0c:29:0d:71:04:97:d3:30:59:d8:73:bf:70:f6: 39:72:7a:8b:37:20:99:5a:e5:aa:40:f7:be:b0:07: c8:d7:16:c6:57:1b:e3:67:54:13:60:1d:02:5f:71: 93:fc:23:cc:6e:20:2c:6c:df:6e:9f:27:3b:06:1f: 3b:80:a6:00:21:eb:8e:56:34:67:18:6e:6d:22:a8: 2b:0a:3c:6e:2c:2a:4f:3b:b5:1f:09:9b:c5:ef:3d: 08:1d:c3:82:f4:b5:dc:77:1a:7e:18:23:75:a5:92: 06:be:72:af:a0:c0:a9:b6:9e:e1:cc:31:09:8e:f3: ba:49:01:2d:11:ac:72:9f:8c:66:cb:1c:23:06:85: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:13:31:8F:A2:24:AF:B4:2D:ED:E2:7E:97:FA:1B:4E:60:46:40 X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:00:1d:10:e6:64:06:6d:ca:39:03:a1:33:9a:b1:0b:6b: e1:f2:79:d5:3d:a6:3d:7b:8f:d2:51:0d:fa:63:75:56:09:99: 5e:ed:15:a8:78:69:1a:24:ce:5e:69:9a:97:27:60:75:71:1a: d6:72:53:59:68:e1:45:33:4d:fc:19:74:29:c8:1f:31:bf:e1: 18:f1:6c:8a:b3:31:34:12:75:ca:96:8c:1e:fe:8e:43:c5:57: 88:28:14:b1:d8:f6:e9:df:22:b9:ae:1e:00:ff:17:d9:d1:58: f7:18:1f:9d:00:2a:74:e4:cd:3f:c5:7c:54:e0:18:ea:6a:a7: 3e:ce:09:bb:9a:fe:cc:df:48:29:3e:83:ae:77:4d:a8:19:fa: b5:8f:8e:c1:cd:5c:2d:cc:12:98:58:4d:97:d9:66:7f:d3:b0: 7e:20:ba:b0:5e:63:cb:ee:d8:21:0d:98:ae:43:82:9d:e4:83: c9:4f:a9:e6:65:bb:64:b0:49:d8:b3:dc:60:08:33:d8:0f:72: 77:83:50:ad:80:f8:82:5f:20:c1:e4:02:3c:27:c0:38:c4:32: 5d:ae:52:ee:e5:3e:cd:3e:a4:b0:c6:07:29:75:84:e8:57:f7: e3:95:40:35:50:6c:9d:28:48:8d:d5:09:5a:70:ad:07:10:78: 11:27:59:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0x4xrLlAa9H91y9Guyt0DVjg2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA3MjMxODE3MjdaFw0yNjA3MjQxODI5MjdaMDMxMTAvBgNV BAMTKDgxNEIxMzMxOEZBMjI0QUZCNDJERURFMjdFOTdGQTFCNEU2MDQ2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Mrh9zypXiUMdTzoR7TA3Bnq8 X9ob7giaObTDxCFnwwT3WKZ05afJWyNrNcNIkUUV/xaDtmyRHTvDr3r9BdD0TA5I 8B9XvRJZ47jGS6zksqkfgE56c2eVX0ZTvpg/bE3a0QDjnFVdWxEjk9IgIEuSOs0j OJZLMggMKQ1xBJfTMFnYc79w9jlyeos3IJla5apA976wB8jXFsZXG+NnVBNgHQJf cZP8I8xuICxs326fJzsGHzuApgAh645WNGcYbm0iqCsKPG4sKk87tR8Jm8XvPQgd w4L0tdx3Gn4YI3Wlkga+cq+gwKm2nuHMMQmO87pJAS0RrHKfjGbLHCMGhcYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUsTMY+iJK+0Le3ifpf6G05gRkAwHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM3AB0Q5mQGbco5A6EzmrELa+HyedU9pj17 j9JRDfpjdVYJmV7tFah4aRokzl5pmpcnYHVxGtZyU1lo4UUzTfwZdCnIHzG/4Rjx bIqzMTQSdcqWjB7+jkPFV4goFLHY9unfIrmuHgD/F9nRWPcYH50AKnTkzT/FfFTg GOpqpz7OCbua/szfSCk+g653TagZ+rWPjsHNXC3MEphYTZfZZn/TsH4gurBeY8vu 2CENmK5Dgp3kg8lPqeZlu2SwSdiz3GAIM9gPcneDUK2A+IJfIMHkAjwnwDjEMl2u Uu7lPs0+pLDGByl1hOhX9+OVQDVQbJ0oSI3VCVpwrQcQeBEnWSM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:46 2026 by rpki-client